Improving Web Application Security: Threats and - CGISecurity

780 Improving Web Application Security: Threats and Countermeasures Create IP filters and filter lists1. Right-click IPSec Security Policies on Local Machine, and then click Manage IPfilter lists and filter actions.2. Click Add to add a new IP filter list., and then type MatchAllTraffic for the filterlist name.3. Click Add to create a new filter and proceed through the IP Filter Wizard dialogsboxes by selecting the default options.This creates a filter that matches all traffic.4. Click Close to close the IP Filter List dialog box.5. Click Add to create a new IP filter list, and then type MatchHTTPAndHTTPS forthe filter list name.6. Click Add, and then click Next to move past the introductory Wizard dialog box.7. Select Any IP Address from the Source address drop-down list, and thenclick Next.8. Select My IP Address from the Destination address drop-down list, and thenclick Next.9. Select TCP from the Select a protocol type drop-down list, and then click Next.10. Select To this port and then specify port 80.11. Click Next and then Finish.12. Click Add, and then repeat steps 9 to 14 to create another filter that allows trafficthrough port 443.Use the following values to create a filter that allows TCP over port 443:●●●●Source Address: Any IP addressDestination Address: My IP AddressProtocol: TCPFrom Port: Any● To Port: 443After finishing these steps, your IP Filter List should look like the one that Figure 5shows.